MAL-2026-204 Malicious code in pako-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b50aeb49929f8ce8f402d5ac0c09ee4735bc5411a45ae75dc357bfc5d18506d The package pako-js was found to contain malicious code. Source: ghsa-malware 86a948a3458aac938e35fbf5ec50b54986362543bef11c481af0f1dd3292cafd Any...

Malicious code in n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5b9fc4d665c764917757933148572fd5cfca44be431dd6f84281b068b1ccfc The package n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz was found to contain malicious code. Source: ghsa-malware...

Malicious code in yunxohang7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a769d99a6a661851b61de53efc010814ffb939cd296c6f923849dc61f89b3f The package yunxohang7 was found to contain malicious code. Source: ghsa-malware 1b795328419a9d8a5a0cf95479488558080aafb9593636fccd0c5bbf500f5f55 Any...

MAL-2026-172 Malicious code in chai-tests-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1116b21de9a6d4e20096c4af06f91c10ce3eaadd3d722923988084ddd4899a The package chai-tests-async was found to contain malicious code. Source: ghsa-malware dcf794e17cf7abc4b2cb2473da8d9425c720cdcf72e279adab300048154cd6...

MAL-2026-150 Malicious code in hoppscotch-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc9fa1661ed3de2ac221307d7e5cac1aea785ac1d0e2241ecd0001a05fea796 The package hoppscotch-agent was found to contain malicious code. Source: ghsa-malware 7c2ae92a02c69aaa3b5287d2172d0fbc6f8f1e3ae51c69f76c7a07e4dcc7a1...

MAL-2026-100 Malicious code in eslint-plugin-supertest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e51e22e6032e74b136ec2615b38bd5801cca8f5a4ef8a09747a442b656ec17 The package eslint-plugin-supertest was found to contain malicious code. Source: ghsa-malware...

MAL-2026-77 Malicious code in polymarket-clob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e650fcd9e5cec151122c4e59ee9f829a9f8f3afbc998be35354879cd24f5d8bf The package polymarket-clob was found to contain malicious code. Source: ghsa-malware c6f2692198b832546ebc0a47e287ea8e976cbbacae0f1963545cb4610ddd08b...

MAL-2026-44 Malicious code in @airtel-web/legos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dc2961b8c79c5958e1d5ebe27ec58d5bf181c3027555890b39d1c06a37df27 The package @airtel-web/legos was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-htmlview (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82606664e32d7050a729171d5dac24f54950e90b7259a7f90a582e94632fcc61 The package @vietmoney/react-native-htmlview was found to contain malicious code. Source: ghsa-malware...

Malicious code in landingpage-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d33042e8f056ce06ca8931599f3a0d11547dd6a7d11d2f74ecc0140bd247533 The package landingpage-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in express-js-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e922c32d1b163c8938985f7665f539243b9be99316491150e61476d30cf0ce68 The package express-js-web was found to contain malicious code. Source: ghsa-malware 50f874487616a31800182c5b87aec47559f7136d5ed3a84355446b795a3137d7...

Malicious code in secguest-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76ab99d9a667e9700bb0176dde546ff3748b742775ea322766035a730391891 The package secguest-react-lib was found to contain malicious code. Source: ghsa-malware...

Malicious code in chai-max (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf9b30832b678dc77fdae0e722638e2a3ff7ba5cf07b09960233418192dd073 The package chai-max was found to contain malicious code. Source: ghsa-malware a6e46cc56f071a0c9f8afeaa19cf981997f743503c55a5e155fd1c99bf53d3a4 Any...

MAL-2025-192676 Malicious code in zebracros-bahlil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1584c60176e7489fa7d40f80dd373fc228d0cb39052fb1e6b5e638f955d229 The package zebracros-bahlil was found to contain malicious code. Source: ghsa-malware c31864656b362790c68a366d8374f2f6ab6b6d8ddf9c04f49cca4eceee2a9e...

MAL-2025-192674 Malicious code in xnetgpt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cec426261ce30ea326ac55c56aaaf04c8efc5dad86f9eecaf8a8397df70dec7 The package xnetgpt was found to contain malicious code. Source: ghsa-malware 168c69e604f23926993c52e06b6a5f4b5355d3dd935261e5aba8c5d761bb17e1 Any...

Malicious code in yt-smm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3641ecf42237a55c9fb81c4368aa7b83a42d2110a64a733f45d27005cf38dc26 The package yt-smm was found to contain malicious code. Source: ghsa-malware b4d96978cd4e109ed8b360f551af24fd1621dd659f63a490c9de077b587f607b Any...

Malicious code in qwqwqw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e634690c8bd1d21672a93e09ed423088fe0e7a238b86a40cda9bae547e678e The package qwqwqw was found to contain malicious code. Source: ghsa-malware 200ea085dc96770417e900e08812693529cd6fde1e7ea45a28c8a332382049f1 Any...

Malicious code in viktorparserctf8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e1243238b2a1eade50d8bcfebe117fd9f3090271497fce1f9d1e2798abeaa4 The package viktorparserctf8 was found to contain malicious code. Source: ghsa-malware 610271459dc452bb1384a92a84e0e37bd11f3d688166faa2ee174e81fdaf8a...

Malicious code in test-mal-npm-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6f3e205b514fc5d9c6e98be4d3b0bf7049c38a0ff62e678584aaff50fc643 The package test-mal-npm-pkg was found to contain malicious code. Source: ghsa-malware d97b7f5012899a502ba9d154bc5f146717e56795f702823294ea3636b433c7...

Malicious code in chai-nerd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector debbd45ba7868f5eca573b8e1aa2ce52439e75cc632f1149ce670f8e3f17abbc The package chai-nerd was found to contain malicious code. Source: ghsa-malware c5a2651b8c60bc1c29940656635411bf52439baa544a902ebf25b1d8c95c276a Any...